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new case 


ICO consultation on the draft right of access 
guidance 


Q1 


Does the draft guidance cover the relevant issues about the right of access? 
C) Yes 
eine 


© Unsure / don't know 
If no or unsure/don’t know, what other issues would you like to be covered in it? 
We only wish to comment on the part of the draft guidance that relates to clarifications. 


Q2 


Does the draft guidance contain the right level of detail? 

©) Yes 

©) No 

© Unsure / don't know 

If no or unsure/don't know, in what areas should there be more detail within the draft 
guidance? 

We only wish to comment on the part of the draft guidance that relates to clarifications. 


Q3 


Does the draft guidance contain enough examples? 
C) Yes 

©) No 

© Unsure / don't know 


If no or unsure/don’t know, please provide any examples that think should be included in 
the draft guidance. 


We only wish to comment on the part of the draft guidance that relates to clarifications. 


Q4 


We have found that data protection professionals often struggle with applying and 
defining ‘manifestly 

unfounded or excessive’ subject access requests. We would like to include a wide 
range of examples 

from a variety of sectors to help you. Please provide some examples of manifestly 
unfounded and excessive 

requests below (if applicable). 


We only wish to comment on the part of the draft guidance that relates to 
clarifications. 


Q5 Ona scale of 1-5 how useful is the draft guidance? 


3 es 
1-Notatall 2-—Slightly | Moderately 4-Very 5-Extremely 
useful useful useful useful useful 


( ) C) o) C) C) 
taa ta Wal nur. 


Q6 Why have you given this score? 


We only wish to comment on the part of the draft guidance that relates to 
clarifications. 


Q7 To what extent do you agree that the draft guidance is clear and easy to understand? 


Strongly Neither agree Strongly 
disagree Disagree nor disagree Agree agree 


> © O O 


Q8 


Q9 


Please provide any further comments or suggestions you may have about the draft 
guidance. 


We welcome the opportunity to share our opinions against the proposed change to 
the timescales for compliance with data subject access requests. In our experience, 
the proposal to keep the clock running while awaiting clarification from an individual 
is neither reasonable nor practicable, for reasons such as listed below: - We work 
with a large number of individuals (students, visiting lecturers, etc.) who take a very 
long time to respond to requests for clarification, sometimes months - Responding to 
subject access requests sometimes involves searching, collecting and collating large 
volumes of information from several service areas and where clarification is received 
within a short period ahead of the deadline, it becomes practically impossible to 
meet our obligations under the law - The pressure of time is highly likely to increase 
human error in the management and security of personal data resulting in breaches 
- The pressure to meet obligatory requirements under these circumstances is bound 
to encourage processing without seeking clarification’ which is likely to be 
problematic for both controllers and individuals 


Are you answering as: 

O An individual acting in a private capacity (eg someone providing their views as a member of the public) 
(`) An individual acting in a professional capacity 

© On behalf of an organisation 

€ ) Other 

Please specify the name of your organisation: 

City, University of London 


What sector are you from: 
Higher Education (Public Sector) 


Q10 


How did you find out about this survey? 


N 


( ) 


( 


_ ) ICO Twitter account 


) ICO Facebook account 


ICO LinkedIn account 


“) ICO website 


C ) ICO newsletter 


(_) 


ICO staff member 


( ) Colleague 


) Personal/work Twitter account 


ka 


(`) Personal/work Facebook account 


(C) Personal/work LinkedIn account 


© Other 


If other please specify: 
PDP Training Newsletter; PLC Practical Law Newsletter 


